Privacy Policy

This Privacy Policy explains how Brandeology LLC ("we", "us", or "our") collects, uses, stores, and protects your personal information when you use the Stochos platform ("Service"). We are the data controller for the personal data described in this policy.

1. Information We Collect

We collect the following categories of personal data:

• Account information: name, email address, password (hashed), and role
• Profile information: display name, avatar, company details
• Usage data: campaign configurations, integration settings, workflow steps, and feature usage
• Support messages: communications with our support team
• Device and log data: IP address, browser type, device identifiers, and access timestamps
• Payment information: processed by Paddle (our Merchant of Record) — we do not store full payment card details

2. How We Use Your Information

We use your personal data for the following purposes:

• Service provision: to create and manage your account, provide the Service, and process your campaigns
• Security and fraud prevention: to verify identity, detect unauthorized access, and prevent abuse
• Product improvement: to analyze usage patterns and improve the Service
• Customer support: to respond to your inquiries and resolve issues
• Marketing: to send product updates and promotional communications (with your consent where required)

3. Legal Basis for Processing

We process your personal data based on the following legal grounds:

• Contract performance: processing necessary to provide the Service under our Terms of Service
• Legitimate interests: security, fraud prevention, and product improvement
• Consent: for marketing communications and optional cookies
• Legal obligation: compliance with applicable laws and regulations

4. Data Sharing

We share your personal data with the following categories of recipients:

• Service providers: hosting providers, analytics tools, and customer support tooling
• Merchant of Record (Paddle): for sale of the product, subscription management, payments, tax compliance, and invoicing. Paddle processes payment data independently as the Merchant of Record.
• Professional advisers: legal and accounting professionals, when necessary
• Authorities: when required by law or to protect our legal rights

5. Data Retention

We retain your personal data for as long as your account is active or as needed to provide the Service. When you delete your account, we will delete or anonymize your personal data within 90 days, except where we are required to retain it for legal, tax, or accounting purposes. Aggregated and anonymized data may be retained for analytics and product improvement.

6. Your Rights

Depending on your jurisdiction, you may have the following rights regarding your personal data:

• Access: request a copy of the personal data we hold about you
• Rectification: request correction of inaccurate or incomplete data
• Erasure: request deletion of your personal data
• Restriction: request limitation of processing in certain circumstances
• Portability: request transfer of your data to another controller
• Objection: object to processing based on legitimate interests or for direct marketing
• Withdraw consent: where processing is based on consent, you may withdraw it at any time

To exercise any of these rights, contact us at privacy@brandeology.com. We will respond within one month of receiving your request.

7. Security

We implement appropriate technical and organizational measures to protect your personal data, including encryption in transit (TLS), access controls, and regular security assessments. However, no method of transmission over the internet or electronic storage is 100% secure.

8. Cookies

We use essential cookies to operate the Service (e.g., session management, authentication). We do not use third-party marketing or analytics cookies without your consent. You can manage cookie preferences through your browser settings.

9. International Transfers

Your data may be transferred to and processed in countries outside your jurisdiction, including the United States. We ensure appropriate safeguards are in place for such transfers, including Standard Contractual Clauses where required.

10. Changes to This Policy

We may update this Privacy Policy from time to time. We will notify you of material changes by posting the updated policy on this page with a revised "Last updated" date.

11. Contact Us

If you have any questions about this Privacy Policy or our data practices, please contact us at privacy@brandeology.com.